CSDD targeted by sophisticated cyberattack in Latvia

The Latvian Road Traffic Safety Directorate (CSDD) experienced a sophisticated cyberattack over the weekend, resulting in unauthorized access to parts of its IT system. Attackers successfully obtained historical payment data related to services provided by the agency.

The compromised information includes certain personal data, such as personal codes or registration numbers, names, company names, payment amounts, payment dates, vehicle license plates, and addresses. Authorities noted that the attack appeared to be targeted and required prior preparation, indicating a high level of technical competence from the perpetrators.

CSDD's IT team, in collaboration with the cyber incident response institution CERT.LV, has halted the attack and implemented security improvements to prevent future occurrences. Officials confirmed that user names and passwords were not compromised, meaning no immediate action is required from clients regarding their login credentials.

However, there is a risk that the stolen data could be used for future targeted fraud. Residents are advised to remain vigilant regarding suspicious emails, text messages, or other communications appearing to come from CSDD and to verify information via the official website.